--- Ferm::Service[ssh_from_bastion].orig
+++ Ferm::Service[ssh_from_bastion]
+ proto => tcp
+ prio => 10
+ ensure => present
+ notrack => False
+ port => 22
+ desc =>
+ srange => ['208.80.155.110', '2620:0:861:4:208:80:155:110', '208.80.154.7', '2620:0:861:1:208:80:154:7', '208.80.153.110', '2a02:ec80:300:3:185:15:59:99', '185.15.59.99', '2620:0:860:4:208:80:153:110', '103.102.166.6', '2001:df2:e500:1:103:102:166:6', '185.15.58.6', '2a02:ec80:600:1:185:15:58:6', '195.200.68.99', '2a02:ec80:700:3:195:200:68:99']
File[/etc/nftables/sets/MW_APPSERVER_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/MW_APPSERVER_NETWORKS_ipv4.nft].orig
+++ File[/etc/nftables/sets/MW_APPSERVER_NETWORKS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft].orig
+++ File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_ssh-from-cumin-masters.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_ssh-from-cumin-masters.nft].orig
+++ File[/etc/nftables/input/10_ssh-from-cumin-masters.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- Ferm::Service[bird_bfd_echo]
- Parameters differences:
--- Ferm::Service[bird_bfd_echo].orig
+++ Ferm::Service[bird_bfd_echo]
+ prio => 10
+ notrack => False
+ desc =>
+ srange => ['172.20.2.1', '2a02:ec80:a000:202::1']
+ src_sets => ['LINK_LOCAL']
+ proto => udp
+ ensure => present
+ port => 3785
- File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft].orig
+++ File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- Ferm::Service[ssh_from_cumin_masters]
- Parameters differences:
--- Ferm::Service[ssh_from_cumin_masters].orig
+++ Ferm::Service[ssh_from_cumin_masters]
+ proto => tcp
+ prio => 10
+ ensure => present
+ notrack => False
+ port => 22
+ desc =>
+ src_sets => ['CUMIN_MASTERS']
- File[/etc/nftables/input/10_ssh-from-cloudcumin-masters.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_ssh-from-cloudcumin-masters.nft].orig
+++ File[/etc/nftables/input/10_ssh-from-cloudcumin-masters.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft].orig
+++ File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/CUMIN_MASTERS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/CUMIN_MASTERS_ipv4.nft].orig
+++ File[/etc/nftables/sets/CUMIN_MASTERS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_heat-api_28004.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_heat-api_28004.nft].orig
+++ File[/etc/nftables/input/10_heat-api_28004.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft].orig
+++ File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft].orig
+++ File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_keystone-public-api_5000.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_keystone-public-api_5000.nft].orig
+++ File[/etc/nftables/input/10_keystone-public-api_5000.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_designate-api_29001.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_designate-api_29001.nft].orig
+++ File[/etc/nftables/input/10_designate-api_29001.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/100_base_puppet.nft]
- Parameters differences:
--- File[/etc/nftables/100_base_puppet.nft].orig
+++ File[/etc/nftables/100_base_puppet.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- Ferm::Service[placement_api_28778]
- Parameters differences:
--- Ferm::Service[placement_api_28778].orig
+++ Ferm::Service[placement_api_28778]
+ proto => tcp
+ prio => 10
+ ensure => present
+ notrack => False
+ port => 28778
+ desc =>
- File[/etc/nftables/input/10_glance-api_29292.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_glance-api_29292.nft].orig
+++ File[/etc/nftables/input/10_glance-api_29292.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_keystone-admin-api_25357.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_keystone-admin-api_25357.nft].orig
+++ File[/etc/nftables/input/10_keystone-admin-api_25357.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv4.nft].orig
+++ File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/MGMT_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/MGMT_NETWORKS_ipv4.nft].orig
+++ File[/etc/nftables/sets/MGMT_NETWORKS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/CLOUD_PRIVATE_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/CLOUD_PRIVATE_NETWORKS_ipv4.nft].orig
+++ File[/etc/nftables/sets/CLOUD_PRIVATE_NETWORKS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/INTERNAL_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/INTERNAL_ipv6.nft].orig
+++ File[/etc/nftables/sets/INTERNAL_ipv6.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- Ferm::Service[keystone_admin_api_25357]
- Parameters differences:
--- Ferm::Service[keystone_admin_api_25357].orig
+++ Ferm::Service[keystone_admin_api_25357]
+ proto => tcp
+ prio => 10
+ ensure => present
+ notrack => False
+ port => 25357
+ desc =>
- File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft].orig
+++ File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- Ferm::Service[radosgw_api_28080]
- Parameters differences:
--- Ferm::Service[radosgw_api_28080].orig
+++ Ferm::Service[radosgw_api_28080]
+ proto => tcp
+ prio => 10
+ ensure => present
+ notrack => False
+ port => 28080
+ desc =>
- File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv6.nft].orig
+++ File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv6.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_radosgw-api_28080.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_radosgw-api_28080.nft].orig
+++ File[/etc/nftables/input/10_radosgw-api_28080.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- Ferm::Service[keystone_public_api_25000]
- Parameters differences:
--- Ferm::Service[keystone_public_api_25000].orig
+++ Ferm::Service[keystone_public_api_25000]
+ proto => tcp
+ prio => 10
+ ensure => present
+ notrack => False
+ port => 25000
+ desc =>
- File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv4.nft].orig
+++ File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft].orig
+++ File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_cinder-api_28776.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_cinder-api_28776.nft].orig
+++ File[/etc/nftables/input/10_cinder-api_28776.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_bird-bgp.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_bird-bgp.nft].orig
+++ File[/etc/nftables/input/10_bird-bgp.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft].orig
+++ File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft].orig
+++ File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv6.nft].orig
+++ File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv6.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft].orig
+++ File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_trove-api_28779.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_trove-api_28779.nft].orig
+++ File[/etc/nftables/input/10_trove-api_28779.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft].orig
+++ File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft]
@@
- notify => Service[nftables]
+ notify => ['Service[nftables]']
- File[/etc/nftables/input/10_bird-bfd-control.nft]
- Parameters differences: